Bokerss
Here is a similar sample :-)
https://www.virustotal.com/gui/file/2d224c944a9a190996ebfaa8d9da4977c1463e6d7ee27235143f35e3ec4267f7
Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.
ID Ransomware - Identify What Ransomware Encrypted Your Files
Started by
Demonslay335
, Mar 24 2016 04:19 PM
1459 replies to this topic
#1456
rivitna
-
- Security Colleague
- 185 posts
- OFFLINE
- Gender:Male
- Local time:08:07 AM
Back to top
#1457
Amigo-A
-
- Members
- 3,049 posts
- ONLINE
Security specialist and Ransomware expert
- Gender:Male
- Location:Bering Strait
- Local time:10:07 AM
Posted 15 February 2024 - 11:10 AM
In fact, this identification as Maoloa Ransomware hides several similar variants of common origin. In parallel with it, another option was used for a long time, which we described as Alco Ransomware.
Later there were even more of them.
ID Ransomware has ceased to be replenished with samples of these ransomware and has ceased to distinguish between them.
I also stopped adding new variants. There is no reason to work in this direction.
Edited by Amigo-A, 15 February 2024 - 11:20 AM.
My site: The Digest "Crypto-Ransomware" + Google Translate
#1458
quietman7
-
- Global Moderator
- 61,818 posts
- OFFLINE
Bleepin' Gumshoe
- Gender:Male
- Location:Virginia, USA
- Local time:12:07 AM
Posted 15 February 2024 - 01:29 PM
In fact, this identification as Maoloa Ransomware hides several similar variants of common origin. In parallel with it, another option was used for a long time, which we described as Alco Ransomware.
Later there were even more of them.
ID Ransomware has ceased to be replenished with samples of these ransomware and has ceased to distinguish between them.
I believe that is why we named the support topic Maoloa-Alco
.
.
Microsoft MVP Alumni 2023, Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023
Microsoft MVP Consumer Security 2007-2015 
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief
If I have been helpful & you'd like to consider a donation, click 
#1459
tharphym
-
- Members
- 3 posts
- OFFLINE
- Local time:01:07 PM
Posted 22 February 2024 - 11:04 AM
But I've been hit by DiskStation Security, and the entire NAS data has been deleted, leaving only the !!!!README!!!!.txt file, which contains my personal ID. How can I go about decrypting this?
#1460
quietman7
-
- Global Moderator
- 61,818 posts
- OFFLINE
Bleepin' Gumshoe
- Gender:Male
- Location:Virginia, USA
- Local time:12:07 AM
Posted 22 February 2024 - 11:20 AM
But I've been hit by DiskStation Security, and the entire NAS data has been deleted, leaving only the !!!!README!!!!.txt file, which contains my personal ID. How can I go about decrypting this?
I already replied to you here (Post #33) in the appropriate support topic for this ransomware.
.
.
Microsoft MVP Alumni 2023, Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023
Microsoft MVP Consumer Security 2007-2015
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief
If I have been helpful & you'd like to consider a donation, click
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users
